ELSA-2025-2473

ELSA-2025-2473 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-03-10

Description

[4.18.0-553.44.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.44.1_10]
- HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302}
- ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786]
- ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197}
- ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]

[4.18.0-553.43.1_10]
- s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999]
- s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999]
- locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894]
- pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229]
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807}
- net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756]
- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756]

Related CVEs

CVE-2024-53197

CVE-2024-57979

CVE-2024-57807

CVE-2024-50302

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.44.1.el8_10.aarch64.rpm	8aae97faee60082795811321e0c4961587789662776100a3f651f7c46919e842	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.44.1.el8_10.aarch64.rpm	8aae97faee60082795811321e0c4961587789662776100a3f651f7c46919e842	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.44.1.el8_10.aarch64.rpm	3b5bbde4be77c09887ea3af7f5a55ccf0aaf7c402b6069254d46dd9c69be6470	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.44.1.el8_10.aarch64.rpm	3b5bbde4be77c09887ea3af7f5a55ccf0aaf7c402b6069254d46dd9c69be6470	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.44.1.el8_10.aarch64.rpm	4687a8ddf78315a1dc7708581402738d8e836bc313c9e9057bafa4081c947026	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.44.1.el8_10.aarch64.rpm	4687a8ddf78315a1dc7708581402738d8e836bc313c9e9057bafa4081c947026	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.44.1.el8_10.aarch64.rpm	a813afaaea8f77acea5797f5d7b52a6cc25a968d8712dea8774ca7dfeaaa1f78	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.44.1.el8_10.aarch64.rpm	a813afaaea8f77acea5797f5d7b52a6cc25a968d8712dea8774ca7dfeaaa1f78	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.44.1.el8_10.aarch64.rpm	ff2c18af26a7d1a8cb60ac9ebfc9650108e08d68101909d6af81e13049aaa764	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.44.1.el8_10.aarch64.rpm	ff2c18af26a7d1a8cb60ac9ebfc9650108e08d68101909d6af81e13049aaa764	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.44.1.el8_10.aarch64.rpm	1b645baee5ff2d9a3f8418cc9e71798c0e570f142a4b97975b4202a53dedcbb4	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.44.1.el8_10.aarch64.rpm	542580a33477e331c92b5a1a6849d18c4bfbccc04e30d364b51e36133191bfcf	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.44.1.el8_10.aarch64.rpm	542580a33477e331c92b5a1a6849d18c4bfbccc04e30d364b51e36133191bfcf	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.44.1.el8_10.aarch64.rpm	5f4f1dcfb036f8b75b8deeefebe4542ae772624f790d1a27ad3274eeab816321	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.44.1.el8_10.aarch64.rpm	5f4f1dcfb036f8b75b8deeefebe4542ae772624f790d1a27ad3274eeab816321	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.44.1.el8_10.src.rpm	8ba918507a6185f6e40273bd04a352007725514784a17ec003daad9ec0fcc0b4	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.44.1.el8_10.x86_64.rpm	840606192854aed140b9795299535a612c6bce5614610b63ca67d9c9ff46f940	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.44.1.el8_10.x86_64.rpm	840606192854aed140b9795299535a612c6bce5614610b63ca67d9c9ff46f940	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.44.1.el8_10.x86_64.rpm	817e07642245c4a9135dcffaa9359e6fd1fa1ed63cee1210622ffa840e17ba27	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.44.1.el8_10.x86_64.rpm	817e07642245c4a9135dcffaa9359e6fd1fa1ed63cee1210622ffa840e17ba27	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.44.1.el8_10.noarch.rpm	ee0c7823d4dadde424711b1743cfd818484c577fc3b0c9cd9019a5e6f78cbd08	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.44.1.el8_10.noarch.rpm	ee0c7823d4dadde424711b1743cfd818484c577fc3b0c9cd9019a5e6f78cbd08	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.44.1.el8_10.x86_64.rpm	d62a0d837cdc4eb600da2b6a5a9719bfe85748eaaac0ff7b3769c5e84407e0fb	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.44.1.el8_10.x86_64.rpm	d62a0d837cdc4eb600da2b6a5a9719bfe85748eaaac0ff7b3769c5e84407e0fb	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.44.1.el8_10.x86_64.rpm	4817aa60371c8906cbcdc2c7bc3785aa79e5c4f9d3e5447638c784d451a7a164	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.44.1.el8_10.x86_64.rpm	4817aa60371c8906cbcdc2c7bc3785aa79e5c4f9d3e5447638c784d451a7a164	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.44.1.el8_10.x86_64.rpm	274e39eff593686d6370a937c06998a8598795428dff8d1de03f9fe3024b9d5e	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.44.1.el8_10.x86_64.rpm	274e39eff593686d6370a937c06998a8598795428dff8d1de03f9fe3024b9d5e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.44.1.el8_10.x86_64.rpm	f2e9572a6ca348b3198216956937936950d63ff88045b094a1b89f960f9fe988	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.44.1.el8_10.x86_64.rpm	f2e9572a6ca348b3198216956937936950d63ff88045b094a1b89f960f9fe988	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.44.1.el8_10.x86_64.rpm	6bcb349d9762a48f2b701754852f81236f1f58f2195f9d865376d834f5289fce	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.44.1.el8_10.x86_64.rpm	6bcb349d9762a48f2b701754852f81236f1f58f2195f9d865376d834f5289fce	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.44.1.el8_10.x86_64.rpm	81737d8556ee6c3da09ce9b96cc07130e0f8637ce047adc278f31456af9c16ac	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.44.1.el8_10.x86_64.rpm	81737d8556ee6c3da09ce9b96cc07130e0f8637ce047adc278f31456af9c16ac	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.44.1.el8_10.x86_64.rpm	cc44fbcdba9a7b69b70b3af6a5c80912b847f283129754082bcd2d7c2f6f4ec6	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.44.1.el8_10.x86_64.rpm	cc44fbcdba9a7b69b70b3af6a5c80912b847f283129754082bcd2d7c2f6f4ec6	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.44.1.el8_10.x86_64.rpm	623e519896143544f39b87bbeef1f5fec0634e1aee7d377a6ea7c032f1ec7096	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.44.1.el8_10.x86_64.rpm	623e519896143544f39b87bbeef1f5fec0634e1aee7d377a6ea7c032f1ec7096	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.44.1.el8_10.noarch.rpm	58c76367c43bd85900f6fa92f1ff6df55f4a00d4017d5090bb893c5dded3e731	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.44.1.el8_10.noarch.rpm	58c76367c43bd85900f6fa92f1ff6df55f4a00d4017d5090bb893c5dded3e731	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.44.1.el8_10.x86_64.rpm	35e9f45474a0ddacfda202307c9efe69ccbfffd3386a5fec5c6937aeceae55f6	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.44.1.el8_10.x86_64.rpm	35e9f45474a0ddacfda202307c9efe69ccbfffd3386a5fec5c6937aeceae55f6	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.44.1.el8_10.x86_64.rpm	dcb6f9d80e43d05b07c878accce7def6238811c7867b9ae594a4fa808fbd9e51	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.44.1.el8_10.x86_64.rpm	dcb6f9d80e43d05b07c878accce7def6238811c7867b9ae594a4fa808fbd9e51	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.44.1.el8_10.x86_64.rpm	68a49244fffbcc8603e97609d8c61d5752960cf9d1865a6bf3d7efb6d526d5f8	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.44.1.el8_10.x86_64.rpm	68a49244fffbcc8603e97609d8c61d5752960cf9d1865a6bf3d7efb6d526d5f8	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.44.1.el8_10.x86_64.rpm	8c4b68beb92d494f9c63f573bf19ffa0adecd285752777953a8d64b7e66e28d7	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.44.1.el8_10.x86_64.rpm	8c4b68beb92d494f9c63f573bf19ffa0adecd285752777953a8d64b7e66e28d7	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.44.1.el8_10.x86_64.rpm	840cc636611fc407bd40671439e31fa7b2c84a409735958065b4ee8a1f3d5bf6	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.44.1.el8_10.x86_64.rpm	840cc636611fc407bd40671439e31fa7b2c84a409735958065b4ee8a1f3d5bf6	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.44.1.el8_10.x86_64.rpm	c4bee91971660303d702e27d2a35cb5ba687d1ddd486b75706e115275fac3f42	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.44.1.el8_10.x86_64.rpm	918883b4938975e412c142c5063ed0d9d698a349dedff590ef3993331aa69419	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.44.1.el8_10.x86_64.rpm	918883b4938975e412c142c5063ed0d9d698a349dedff590ef3993331aa69419	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.44.1.el8_10.x86_64.rpm	c8dae30c9fc4ea10851decbfb0aed1f2f5076356daf8a4930a642d1f62d41563	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.44.1.el8_10.x86_64.rpm	c8dae30c9fc4ea10851decbfb0aed1f2f5076356daf8a4930a642d1f62d41563	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team